340
edits
Ingress filter: Difference between revisions
no edit summary
No edit summary |
No edit summary |
||
| Line 5: | Line 5: | ||
| [[File:NIC filter.png|1000px|none|right]] | | [[File:NIC filter.png|1000px|none|right]] | ||
|} | |} | ||
The filter page allows setting a processing filter for live traffic. The traffic may be filtered before it is processed. | The filter page allows setting a processing filter for live traffic. The traffic may be filtered before it is processed. | ||
| Line 17: | Line 16: | ||
* duplicate packets. | * duplicate packets. | ||
They can all be set to either | They can all be set to either denylist or allowlist mode. | ||
Filtering will be evaluated for every packet in tab order. | Filtering will be evaluated for every packet in tab order. | ||
The more restrictive filter will be applied. | The more restrictive filter will be applied. | ||
For instance | For instance if no IP address is denied but a specific MAC address is on the denylist, no traffic for that MAC address will be processed. | ||
The processing filter is applied on live traffic only. When replaying a pcap or using the remote traffic capture feature, filtering is not used. | The processing filter is applied on live traffic only. When replaying a pcap or using the remote traffic capture feature, filtering is not used. | ||
| Line 48: | Line 47: | ||
The '''Memory used''' graph shows how much of the memory which has been configured for use by the packet deduplication is actually consumed. If the value is very high it is possible that the configured amount of memory is not sufficient for the actual traffic. | The '''Memory used''' graph shows how much of the memory which has been configured for use by the packet deduplication is actually consumed. If the value is very high it is possible that the configured amount of memory is not sufficient for the actual traffic. | ||
The '''Oldest packet age''' graph shows how old the oldest packet known to the packet | The '''Oldest packet age''' graph shows how old the oldest packet known to the packet deduplication is. If this value is significantly lower than the configured '''Packet timeout''' value the configured amount of memory may not be sufficient for the actual traffic. | ||
==== Settings ==== | ==== Settings ==== | ||